City of Hoboken

Summary

A ransomware attack targeted the City of Hoboken, forcing the closure of City Hall and disrupting online municipal services. The incident led to canceled court sessions and suspended street sweeping, though garbage collection and recreational programs proceeded as scheduled. Officials isolated the breach to one division, implementing immediate precautions by instructing employees to avoid logging into systems to prevent further spread. Federal authorities and the city's IT department are investigating, but no confirmation was provided regarding ransom demands. Residents received text alerts about the disruption, which occurred near a holiday period. Authorities emphasized the frequency of such attacks against governments and institutions, noting efforts to protect sensitive information from compromise.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On November 27, 2024, the City of Hoboken, New Jersey, experienced a ransomware cyberattack that disrupted municipal operations. The attack forced the immediate closure of City Hall and disabled online city services. Officials canceled Hoboken municipal court sessions and suspended citywide street sweeping due to the incident. Parking regulations remained enforceable, while garbage collection and recreational programs continued without interruption. Mayor Ravi Bhalla confirmed federal authorities and the city’s IT department were investigating but did not identify the specific division targeted. The attack was contained to one division, with city systems preventing further spread. Public Safety Director Ken Ferrante emphasized proactive measures, instructing employees not to log into computers, portals, or emails to limit propagation risks. This mirrored protocols from a prior ransomware incident eight years earlier.

The city alerted residents via text message about the attack, which occurred shortly before the Thanksgiving holiday weekend. Officials characterized ransomware attacks as pervasive crimes targeting governments, hospitals, universities, and private companies for financial gain. While acknowledging such incidents often involve ransom demands, Hoboken authorities declined to confirm whether payment was sought in this case. Mayor Bhalla highlighted the effectiveness of existing safeguards in containing the breach and protecting resident data. Operational disruptions were mitigated by rapid isolation of affected systems before business hours began. No evidence of compromised personal or financial information was reported at the time of initial disclosures.

Sources

Sources available to members: 1 source.